Solved

Access denied on some folders, even for administrator

Posted on 2007-11-18
7
2,882 Views
Last Modified: 2008-10-28
Hello,
I have a problem with a install of XP Prof SP2.
On some folders (especially the "all users" profile folder) I cannot view, delete, edit or add any file. I can see the file lists. This is escpecially impractical as windows cannot be validated anymore because of this error: it just returns: "Acces denied"
I've tried:
- Logging in as administrator: no success
- Granting all rights to everyone (via the "Security" tab of the properties option): no success
- Changing the owner: still access denied
- Giving a test user all the priviliges I found and adding him to all of the groups: no success

Does anyone have an idea?
0
Comment
Question by:dtechnology
7 Comments
 
LVL 4

Expert Comment

by:Wolluf
ID: 20307923
Has this always been the case since install - or did it start recently after being ok for a while?

When you take ownership of a folder, do you tick the box which replaces owner on all subfolders?

There isn't a 'deny access' permission set against either the Users or Eveyone group? Have you tried removing all security except for your user (just to test - obviously the All Users folder should be accessible to everyone).
0
 
LVL 88

Expert Comment

by:rindi
ID: 20307947
Is encryption being used by any chance?
0
 
LVL 8

Expert Comment

by:JSoup
ID: 20308189
http://www.microsoft.com/resources/documentation/windows/xp/all/proddocs/en-us/chkdsk.mspx?mfr=true
chkdsk /f

How to Run Check Disk on Windows XP
http://www.isd518.net/District/TechDir/Help/Chkdsk.htm

Note this issue
The CHKDSK utility incorrectly identifies and deletes in-use security descriptors
http://support.microsoft.com/kb/831374

0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 

Assisted Solution

by:Jameshontishar
Jameshontishar earned 50 total points
ID: 20314789
Have you tried taking ownership of the folder using the admin account....

ie right click properties - advanced - take ownership

0
 
LVL 8

Expert Comment

by:JSoup
ID: 20314895
Note this issue
The CHKDSK utility incorrectly identifies and deletes in-use security descriptors
http://support.microsoft.com/kb/831374

0
 
LVL 5

Expert Comment

by:Dr-4N
ID: 20323681
You can try a utility called unlocker this is free for download from the internet and it adds an option in the context menu allowing you to free the folder form any program locking it.
0
 
LVL 3

Accepted Solution

by:
ruijietan earned 450 total points
ID: 20350904
The system account should have access to the files.

This is the procedure for entering that folder as NT AUTHORITY\SYSTEM using a hole in the task scheduler.

Open the run box and type cmd.

When the command prompt pops up, type 'at (systemtime after 1 min) /interactive cmd.exe'

Type the time in the 24 hour format.

For example:

The system time is 13:59.
You would type the following:

at 14:00 /interactive cmd.exe

REMEMBER THE COLEN BETWEEN  14 AND 00! Full stops don't work.

When system time turns to 14:00, a command prompt will come pop up because of the entry you put in the Task Scheduler. That prompt is running under the System Account, and anything you execute there will run as System.

NOTE: Keep the original prompt that is running under YOUR account running if you want to revert to your account without rebooting later on.

Now start Task Manager and end the 'explorer.exe' process.

The desktop and start bar will disappear. This is normal.

Enter: 'explorer.exe' in the prompt which is running with System Priviliges.

Click on the start button. You are now logged in as NT AUTHORITY\SYSTEM.

The system should be able to access those files.

Should you want to revert to your original account without rebooting, just end the explorer.exe process again and type 'explorer.exe' in the prompt running under your account.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

911 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

22 Experts available now in Live!

Get 1:1 Help Now